Phishing attackers target Phantom wallet users with fake update pop-ups

Scammers have been connecting to Phantom wallets in an attempt to lure users with a fake update extension signature request.
Phishing scammers are targeting users of the Solana-based crypto wallet Phantom by attempting to steal private keys through pop-ups that spoof legitimate update requests.
Web3 scam detection platform Scam Sniffer posted to X on Feb. 6 to warn that scammers were connecting to real Phantom wallets and attempting to trick users with a fake “update extension” signature request.
If the victims approve the request, a prompt appears asking them to input a seed phrase, which, if entered, would allow scammers full access to the wallet to drain it.
In late January, Scam Sniffer warned Phantom users about pop-ups on malicious websites that mimic the appearance of Phantom’s interface and prompt the user to enter their wallet seed phrase for a fake connection request.
To identify malicious pop-ups, Scam Sniffer suggested right-clicking the links since “phishing pages block right-clicking,” while real Phantom wallet windows will not restrict the action.
Get to know Godleak
Godleak crypto signal is a service which provide profitable crypto and forex signals. Godleak tried to provide you signals of best crypto channels in the world.
It means that you don’t need to buy individual crypto signal vip channels that have expensive prices. We bought all for you and provide you the signals with bot on telegram without even a second of delay.
Godleak crypto leak service have multiple advantages in comparision with other services:
- Providing signal of +160 best crypto vip channels in the world
- Using high tech bot to forward signals
- Without even a second of delay
- Joining in +160 separated channels on telegram
- 1 month, 3 months , 6 months and yearly plans
- Also we have trial to test our services before you pay for anything
For joining Godleak and get more information about us only need to follow godleak bot on telegram and can have access to our free vip channels. click on link bellow and press start button to see all features
Join for Free
☟☟☟☟☟
https://t.me/Godleakbot
Also you can check the list of available vip signal channels in the bot. by pressing Channels button.
The platform also advised checking the URL since genuine Phantom popups show “chrome-extension” as part of the link, which scam web pages can’t mimic.
“Phantom’s popups act like system windows: you can minimize, maximize, and resize them,” Scam Sniffer said. “Fake ones are trapped inside the browser tab.”
Phantom wallet usage has been steadily increasing amid the rising popularity of Solana-based memecoins.
Phantom’s 24-hour revenue from fees has been around $470,000 over the past day, putting it ahead of Coinbase Wallet, according to DefiLlama. Phantom daily revenue spiked to an all-time high of $3.6 million on Jan. 19.
Phantom claims to have surpassed 10 million monthly active users and more than 850 million total transactions in 2024. On Feb. 6, the platform launched multicurrency support in 16 different currencies.
On Jan. 17, Phantom said it had raised $150 million in a Series C funding round led by venture capital firms Sequoia Capital and Paradigm, valuing the firm at $3 billion.
Earlier in the month, it refuted rumors suggesting it would launch a token airdrop to complement its soon-to-be-released social discovery feature.